Skip to main content

Memory Corruption

16624 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-37073 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37072 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37071 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37069 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37068 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37067 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37066 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36520 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36519 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36518 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36517 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36516 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36515 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36514 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36513 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36511 Aug 25, 14:15 CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware H3C
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-36508 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36507 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36506 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36505 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36504 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36503 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36502 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36501 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36500 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36499 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36498 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36497 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36496 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-36495 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36494 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36493 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36492 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36491 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36490 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36489 Aug 25, 14:15 HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36488 Aug 25, 14:15 HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36484 Aug 25, 14:15 HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36483 Aug 25, 14:15 HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36482 Aug 25, 14:15 HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Command Injection Memory Corruption N350Rt Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.9%
CVE-2022-36480 Aug 25, 14:15 HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36478 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36477 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36475 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36474 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36473 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36472 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36471 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36470 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36469 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36468 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36467 Aug 25, 14:15 HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware H3C
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36466 Aug 25, 14:15 HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36465 Aug 25, 14:15 HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36464 Aug 25, 14:15 HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36463 Aug 25, 14:15 HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36462 Aug 25, 14:15 HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware TOTOLINK
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-32837 Aug 24, 20:15 HIGH This Week

This issue was addressed with improved checks. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Apple macOS Ipados +3
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-32813 Aug 24, 20:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +5
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-32812 Aug 24, 20:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +1
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-32810 Aug 24, 20:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +3
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-32793 Aug 24, 20:15 HIGH This Week

Multiple out-of-bounds write issues were addressed with improved bounds checking. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Apple macOS Fedora +5
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2022-2978 Aug 24, 16:15 HIGH This Week

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Linux Use After Free Memory Corruption Debian +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-20122 Aug 24, 14:15 CRITICAL Act Now

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Use After Free Memory Corruption Android
NVD
CVSS 3.1
9.8
EPSS
0.4%
CVE-2022-25903 Aug 24, 05:15 Cargo HIGH PATCH This Week

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Denial Of Service Memory Corruption Opcua Opcua Project
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2022-2938 Aug 23, 20:15 HIGH PATCH This Week

A flaw was found in the Linux kernel's implementation of Pressure Stall Information. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Denial Of Service Linux Use After Free Memory Corruption Red Hat +10
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-2946 Aug 23, 17:15 HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0246. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption Debian Debian Linux +3
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-38667 Aug 22, 20:15 CRITICAL POC PATCH Act Now

HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption Crow Crowcpp
NVD GitHub
CVSS 3.1
9.8
EPSS
2.1%
CVE-2022-25972 Aug 22, 19:15 HIGH POC This Week

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Hdf5 Hdfgroup
NVD GitHub
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-36233 Aug 19, 22:15 MEDIUM POC This Month

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Tenda Ac9 Firmware Tendacn
NVD VulDB
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-37175 Aug 19, 21:15 CRITICAL Act Now

Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Tenda Ac15 Firmware
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-2889 Aug 19, 13:15 HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0225. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption Fedora Vim +1
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-36947 Aug 18, 21:15 CRITICAL Act Now

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Image Viewer Faststone
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2022-37049 Aug 18, 20:15 HIGH POC This Week

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Broadcom Fedora Tcpreplay +1
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-37048 Aug 18, 20:15 HIGH POC This Week

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Broadcom Fedora Tcpreplay +1
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-37047 Aug 18, 20:15 HIGH POC This Week

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Broadcom Fedora Tcpreplay +1
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-21172 Aug 18, 20:15 MEDIUM PATCH This Month

Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Memory Corruption Intel Proset Wi Fi 6E Ax210 Firmware +2
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-35164 Aug 18, 05:15 CRITICAL POC Act Now

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Libredwg Gnu
NVD GitHub
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-2862 Aug 17, 20:15 HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0221. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption Fedora Vim +1
NVD GitHub
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-36191 Aug 17, 16:15 MEDIUM POC This Month

A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gpac
NVD GitHub
CVSS 3.1
5.5
EPSS
0.4%
CVE-2022-36190 Aug 17, 15:15 CRITICAL POC Act Now

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Gpac
NVD GitHub
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-38238 Aug 16, 21:15 HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf Xpdf Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-38237 Aug 16, 21:15 HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf Xpdf Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-38231 Aug 16, 21:15 HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf Xpdf Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-38229 Aug 16, 21:15 HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf Xpdf Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-38228 Aug 16, 21:15 HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf Xpdf Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-38227 Aug 16, 21:15 HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf Xpdf Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-37781 Aug 16, 21:15 HIGH POC This Week

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Fdkaac Fdkaac Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-36150 Aug 16, 21:15 MEDIUM POC This Month

tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Tifig Monostream
NVD GitHub
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-36149 Aug 16, 21:15 MEDIUM POC This Month

tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry(). Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Tifig Monostream
NVD GitHub
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-37073
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-37072
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-37071
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-37069
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-37068
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-37067
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-37066
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36520
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36519
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36518
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36517
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36516
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36515
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36514
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36513
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36511
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gr 1200W Firmware +1
NVD GitHub
CVE-2022-36508
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36507
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36506
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36505
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36504
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36503
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36502
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36501
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36500
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36499
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36498
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36497
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36496
EPSS 1% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36495
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36494
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36493
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36492
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36491
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36490
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36489
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Magic Nx18 Plus Firmware +1
NVD GitHub
CVE-2022-36488
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware +1
NVD GitHub
CVE-2022-36484
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware +1
NVD GitHub
CVE-2022-36483
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware +1
NVD GitHub
CVE-2022-36482
EPSS 1% CVSS 7.8
HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Command Injection Memory Corruption +2
NVD GitHub
CVE-2022-36480
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption N350Rt Firmware +1
NVD GitHub
CVE-2022-36478
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36477
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36475
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36474
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36473
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36472
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36471
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36470
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36469
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36468
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36467
EPSS 0% CVSS 7.8
HIGH POC This Week

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption B5 Mini Firmware +1
NVD GitHub
CVE-2022-36466
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware +1
NVD GitHub
CVE-2022-36465
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware +1
NVD GitHub
CVE-2022-36464
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware +1
NVD GitHub
CVE-2022-36463
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware +1
NVD GitHub
CVE-2022-36462
EPSS 0% CVSS 7.8
HIGH POC This Week

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption A3700r Firmware +1
NVD GitHub
CVE-2022-32837
EPSS 1% CVSS 7.8
HIGH This Week

This issue was addressed with improved checks. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Apple +5
NVD
CVE-2022-32813
EPSS 0% CVSS 7.8
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +7
NVD
CVE-2022-32812
EPSS 1% CVSS 7.8
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +3
NVD
CVE-2022-32810
EPSS 1% CVSS 7.8
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +5
NVD
CVE-2022-32793
EPSS 1% CVSS 7.5
HIGH This Week

Multiple out-of-bounds write issues were addressed with improved bounds checking. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Apple +7
NVD
CVE-2022-2978
EPSS 0% CVSS 7.8
HIGH This Week

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Linux Use After Free +4
NVD
CVE-2022-20122
EPSS 0% CVSS 9.8
CRITICAL Act Now

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Use After Free +2
NVD
CVE-2022-25903 Cargo
EPSS 1% CVSS 7.5
HIGH PATCH This Week

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Denial Of Service Memory Corruption +2
NVD GitHub
CVE-2022-2938
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A flaw was found in the Linux kernel's implementation of Pressure Stall Information. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Denial Of Service Linux Use After Free +12
NVD
CVE-2022-2946
EPSS 1% CVSS 7.8
HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0246. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption +5
NVD GitHub
CVE-2022-38667
EPSS 2% CVSS 9.8
CRITICAL POC PATCH Act Now

HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption +2
NVD GitHub
CVE-2022-25972
EPSS 1% CVSS 7.8
HIGH POC This Week

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD GitHub
CVE-2022-36233
EPSS 0% CVSS 5.5
MEDIUM POC This Month

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Tenda +2
NVD VulDB
CVE-2022-37175
EPSS 1% CVSS 9.8
CRITICAL Act Now

Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Tenda +1
NVD
CVE-2022-2889
EPSS 0% CVSS 7.8
HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0225. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption +3
NVD GitHub
CVE-2022-36947
EPSS 2% CVSS 9.8
CRITICAL Act Now

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Image Viewer +1
NVD
CVE-2022-37049
EPSS 0% CVSS 7.8
HIGH POC This Week

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Broadcom +3
NVD GitHub
CVE-2022-37048
EPSS 0% CVSS 7.8
HIGH POC This Week

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Broadcom +3
NVD GitHub
CVE-2022-37047
EPSS 0% CVSS 7.8
HIGH POC This Week

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Broadcom +3
NVD GitHub
CVE-2022-21172
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Memory Corruption +4
NVD
CVE-2022-35164
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption +2
NVD GitHub
CVE-2022-2862
EPSS 1% CVSS 7.8
HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0221. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption +3
NVD GitHub
CVE-2022-36191
EPSS 0% CVSS 5.5
MEDIUM POC This Month

A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gpac
NVD GitHub
CVE-2022-36190
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption +1
NVD GitHub
CVE-2022-38238
EPSS 0% CVSS 7.8
HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf +1
NVD GitHub
CVE-2022-38237
EPSS 0% CVSS 7.8
HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf +1
NVD GitHub
CVE-2022-38231
EPSS 0% CVSS 7.8
HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf +1
NVD GitHub
CVE-2022-38229
EPSS 0% CVSS 7.8
HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf +1
NVD GitHub
CVE-2022-38228
EPSS 0% CVSS 7.8
HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf +1
NVD GitHub
CVE-2022-38227
EPSS 0% CVSS 7.8
HIGH POC This Week

XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Xpdf +1
NVD GitHub
CVE-2022-37781
EPSS 0% CVSS 7.8
HIGH POC This Week

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Fdkaac +1
NVD GitHub
CVE-2022-36150
EPSS 0% CVSS 5.5
MEDIUM POC This Month

tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Tifig +1
NVD GitHub
CVE-2022-36149
EPSS 0% CVSS 5.5
MEDIUM POC This Month

tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry(). Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption +2
NVD GitHub
Prev Page 110 of 185 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy